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DETAILED ACTION 

Claims 1-65 have been considered. 

Claim Objections 

5 Claim 49 is objected to because of the following informalities: "intended recipient's" in part c 

should be "intended recipient's identity". Appropriate correction is required. 

Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

10 The specification shall conclude with one or more claims particularly pointing out and distinctly 

claiming the subject matter which the applicant regards as his invention. 

Claim 21 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite for failing to 
15 particularly point out and distinctly claim the subject matter which applicant regards as the invention. The 
applicant has not provided a proper definition for determining which encryption algorithms are 
"lightweight" and which encryption algorithms are "heavy". The applicant merely cites an example of each 
in the specification which does not provide an adequate standard for determining all encryption 
algorithms. Appropriate correction is required. 

20 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

25 (e) the invention was described in (1) an application for patent, published under section 122(b), by 

another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 

30 only if the international application designated the United States and was published under Article 21 (2) 

of such treaty in the English language. 
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Claims 1-2,5-6,8-10,13-21,25-37,41-43,46-48,54-56,58-62, and 64-65, rejected under 35 
U.S.C. 102(e) as being anticipated by Chan, U.S. Patent No. 6,378,070. 

As per claims 1-2,5-6,8-10,13-21,25-37,41-43,46-48,54-56,58-62, and 64-65, the applicant 
5 describes a method of delivering a digital document to an intended recipient comprising the following 
limitations which are met by Chan: 

a) obtaining a public token of the intended recipient (Col 6, lines 35-40); 

b) encrypting the digital document with a session key (Col 6, lines 20-29); 

c) encrypting the session key with the intended recipient's public key (Col 6, lines 35-38); 

10 d) communicating to the printout station and securely retaining the encrypted digital document at 

the printout station (Col 7, lines 21-29); 

e) communicating the encrypted session key to the printout station (Col 7, lines 21-29); 

f) communicating an independently verifiable data record of the intended recipient to the printout 
station, the independently verifiable data record comprising the intended recipient's public key (Col 7, 

15 lines 21-29); 

g) communicating the independently verifiable data record comprising the intended recipient's 
public key to a remote device (Col 7, lines 21-29); 

h) decrypting, using a remote device, the encrypted session key using the received intended 
recipient's public key and an intended recipient's private key residing in the remote device (Col 7, lines 

20 21-29); 

i) communicating the decrypted session key from the remote device to the printout station (Col 7, 
lines 21-29); 

j) decrypting, at the printout station, the digital document using the decrypted session key (Col 7, 
lines 45-49); 

25 k) releasing the document (Col 7, lines 50-51). 

The remote device is the smart card and the envelope is the independently verifiable data record. 
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Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
5 forth in section 102 of this title, if the differences between the subject matter sought to be patented and 

the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

10 

Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Menezes (Menezes, 
Alfred J. Handbook of Applied Cryptography. CRC Press. Washington DC. 1997. pages 452-454). 

As per claim 7, the applicant describes the method according to claim 1, which is met by Chan, 
15 with the following limitation which is met by Menezes: 

Wherein the requesting step comprises requesting supply of data encoded with the second token 
which can be decoded with the first token (Menezes: pages 452-454); 

Chan discloses all the limitations of claim 1. Chan also discloses that the user proves his identity 
by providing supply of data when the document store receives identity information read by the smart card 
20 reader and forwarded by the printer (Col 7, lines 1-7). 

However, Chan does not disclose that the supply of data is encoded with the second token 
(private key) and decoded with the first token (public key). Menezes discloses the idea of a digital 
signature. It would have been obvious to one of ordinary skill in the art at the time the invention was filed 
to combine the ideas of Menezes with those of Chan and digitally sign the supply of data with the private 
25 key because doing so provides a more secure way to authenticate the identity of the user. 



Claims 11,12,38-40,57, and 63 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chan in view of Schneier, (Schneier, Bruce. Applied Cryptography. 1996. John Wiley & Sons, Inc. Second 
Edition. Pages 68-73, 575-576). 
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As per claims 11,12,57, and 63, the applicant describes the method of claim 1 , which is met by 
Chan, with the following limitation which is met by Schneier: 

Wherein the intended recipient's independently verifiable data record is provided as an intended 
recipient's digital certificate (Schneier: pages 575-576); 
5 Chan discloses all the limitations of claim 1 . However Chan discloses that the independently 

verifiable data record is an envelope, not a digital certificate. 

Schneier discloses that a certificate can be transmitted between users to verify. It would have 
been obvious to one of ordinary skill in the art at the time the invention was filed to combine the ideas of 
Schneir with those of Chan and have a certificate sent as an additional independently verifiable data 
10 record so that further verification can be provided and/or a public key of a user can be extracted. 

As per claims 38-40, the applicant describes a method according to claim 21, which is met by 
Chan, with the following limitation which is met by Schneier: 

Wherein the receiving step comprises receiving a plurality of transmitted independently verifiable 
15 data records of the intended recipients at the printout station (Schneier: pages 68-73); 

Chan discloses all the limitations of claim 21. However, Chan discloses authentication only for 
one user, not a plurality of users. Schneier discloses a secret splitting method whereby more than one 
intended recipient needs to be present to allow a process to happen (pages 70-71). 

It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 
20 combine the ideas of Schneier with those of Chan in the case where more than one recipient needs to 
prove his identity at the printing station for a document to be printed. 

Claims 3-4,22-24,44-45, and 49-53 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Chan in view of Lundblad, European Patent Application Publication No. 0542703 A1. 

25 

As per claims 3-4,22-24,44-45, and 49-53, the applicant describes the method of claim 1, which is 
met by Chan, with the following limitation which is met by Lundblad: 
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Wherein the retaining step comprises printing out the document as received and placing it in a 
locked compartment (Lundblad: Col 3, lines 3-12; 14 of Fig 1); 

Chan discloses all the limitations of claim 1 . However, Chan does not disclose the use of a 
locked compartment. Lundblad discloses the use of a locked compartment which can only be accessed 
with a valid key which is a controller. It would have been obvious to one of ordinary skill in the art at the 
time the invention was filed to incorporate a locked compartment on the printer of Chan's system as a 
further means to safeguard the system. 

Claim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for 
the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1-2,5-11,13-18,41-43,46-48,54-56,58, and 60-62 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Mandelbaum, European Patent Application Publication No. 0671830 A2. 

As per claim 1 , the applicant describes a method of delivering a digital document to an intended 
recipient at a printout station comprising the following limitations which are met by Mandelbaum: 

a) receiving and securely retaining a transmitted document and a transmitted independently 
verifiable data record of the intended recipient at a printout station (Col 6, lines 40-44; Col 2, lines 9-26); 

b) obtaining a first token of the intended recipient (Col 2, lines 50-53); 

c) requesting proof of the intended recipient's identity at the printout station using data in the 
independently verifiable data record of the intended recipient (Col 6, lines 56-58; Col 7, lines 1-6; Col 5, 
lines 49-58; Table 10 of Fig 4); 
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d) releasing the document when the intended recipient has proven their identity by use of a 
second token that is uniquely related to the first token (Col 7, lines 27-47); 

Regarding part a), messages sent to the printout station comprise an unrestricted access part 
which identifies the intended recipient and is the independently verifiable data record (Col 2, lines 9-26) 
5 and a restricted access part which is securely stored in memory until the intended recipient has proven 
his identity (Col 2, lines 9-26; Col 6, lines 40-44). 

Regarding parts b) and d), the applicant writes that the first token is a public key when public-key 
infrastructure is being used (Applicant: Page 4, lines 15-16). Mandelbaum writes that the sender uses a 
public key, or first token, of the recipient in order to encrypt a message which can only be decrypted by 
10 the use of the recipient's private key, or second token, which is uniquely related to the second token (Col 
7, lines 27-47). The recipient therefore obtains the first token since the message is encrypted using the 
first token. The applicant should also note that in a second embodiment which is less secure, the sender 
can use his private key to encrypt a message which can only be decrypted using the sender's public key. 

Regarding part c), the lines and figure referenced above illustrate that the intended recipient must 
15 prove his identity to the fax machine (which uses the stored independently verifiable data record obtained 
in the header portion of the message) in order to decrypt and access the restricted message portion. 



As per claims 2 and 42, the applicant describes the method of claims 1 and 41, which are 
anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
20 Mandelbaum: 

Wherein the transmitted document is a fax document and the printout station comprises a fax 
machine (Col 3, lines 15-17). 



25 



As per claims 5 and 46, the applicant describes the method of claims 1 and 41, which are 
anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
Mandelbaum: 
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Wherein the retaining step comprises storing the received document in memory without printing 
out a copy of it on receipt (Col 6, lines 40-44). 

As per claims 6 and 47, the applicant describes the method of claims 5 and 46, which are 
5 anticipated by Mandelbaum (see above), with the following limitation which is also anticipated by 
Mandelbaum: 

Wherein the releasing step comprises printing out a copy of it (Col 7, lines 48-56); 

As per claim 7, the applicant describes a method according to claim 1, which is anticipated by 
10 Mandelbaum, with the following limitation which is also met by Mandelbaum: 

Wherein the requesting step comprises requesting supply of data encoded with the second token 
which can be decoded with the first token (Col 4, lines 11-21). 

As per claim 8, the applicant describes the method of claim 1, which is anticipated by 
15 Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the releasing step is carried out when the intended recipient has presented a portable 
data carrier holding the second token to the printout station and has transferred data to prove their 
identity (Col 7, lines 27-56); 

The portable data carrier, or smart card, must be presented to the smart card interface to prove 
20 their identity. Also, the smart card holds the intended recipient's private key, or second token, which is 
used to decrypt the encrypted message. 

As per claims 9 and 48, the applicant describes the method of claims 8 and 41 , which are met by 
Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 
25 Wherein the releasing step further comprises the intended recipient entering a verifiable security 

identifier into the printout station to establish that they are the legitimate owner of the portable data carrier 
(Col 4, lines 21-24); 
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The identifier is the PIN code. 

As per claim 10, the applicant describes the method of claim 8, which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the portable data carrier is a smart card and the printout station comprises a smart card 
reader (Col 4, lines 9-13). 

As per claim 1 1 , the applicant describes the method of claim 1 , which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the obtaining step comprises extracting the first token transmitted with the document and 
the data record (Table 404 of Fig 4); 

As one can see in the table, the fax machine is able to extract information about the first token 
from the message and display the information as a flag which is set when the message is encrypted with 
the intended recipient's public key. 

As per claim 13, the applicant describes the method of claim 1 ( which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Further comprising carrying out an on-line check of the validity of the intended recipient's 
independently verifiable data record (Col 4, lines 17-24); 

The applicant writes that the smart card authentication method is preferably the AT&T CSS user 
authentication system "in which the user calls the system" (Col 4, lines 17-19). Since the user is calling 
the system for authentication, an online authentication is taking place. 

As per claim 14, the applicant describes the method of claim 1, which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Further comprising instructing a third party to carry out an on-line check of the validity of the 
intended recipient's independently verifiable data record (Col 4, lines 17-24); 
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Since the authentication system is one in which the user calls into the system, it is reasonable to 
assume that a third party validates the intended recipient. 

As per claims 15 and 16, the applicant describes the method of claims 13 and 14, which are met 
by Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the releasing step further comprises only releasing the document if the validity of the 
independently verifiable data record has been confirmed as a result of the check (Col 4, lines 23-24). 

As per claims 17 and 43, the applicant describes the method of claims 1 and 41, which are met 
by Mandelbaum (see above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the first and second tokens comprise private and public encryption/decryption keys of 
the intended recipient (Col 2, lines 50-53; Col 7, lines 27-32); 

The use of the recipient's public key, or first token, is described (Col 2, lines 50-53) as well as the 
use of the intended recipient's private key, or second token, (Col 7, lines 27-32). 

As per claim 18, the applicant describes the method of claim 1, which is met by Mandelbaum (see 
above), with the following limitation which is also anticipated by Mandelbaum: 

Wherein the transmitted document is encoded and the method further comprises decoding the 
received document once the intended recipient has proven their identity (Col 7, lines 3-6; Col 7, lines 27- 
56). 

As per claim 41, the applicant describes a device for delivering a digital document to an intended 
recipient comprising limitations a) through d) which are met by Mandelbaum in the rejection of claim 1 
(see above) and the following additional limitation which is also met by Mandelbaum: 

e) a portable data carrier reader for receiving information from a portable data carrier (Col 4, lines 

9-13). 



Application/Control Number: 09/918,188 Page 1 1 

Art Unit: 2137 

As per claim 54, the applicant describes a method of delivering a digital document from a first 
station via a communications network to an intended recipient at a second station, the method comprising 
limitations d) through g) which are met by Mandelbaum in the rejection of claim 1 (see above) and the 
following additional limitations which are also met by Mandelbaum: 

a) obtaining details of the intended recipient, including an independently verifiable data record of 
the intended recipient at the first station (Col 5, lines 5-11); 

b) determining prior to transmission of the document whether the second station is one which is 
arranged to implement the present method (Col 5, lines 5-11); 

c) transmitting the document and the independently verifiable data record of the intended 
recipient to the second station (Col 5, lines 29-33); 

Regarding part b), the applicant should note that it is inherent in the art that the address book 
provides a way of determining whether the second station is one which is arranged to implement the 
present method. Otherwise, it wouldn't make sense to keep an address book of intended recipients and 
the public keys if the intended recipients had no way to decrypt the received message according to the 
present system. 

As per claims 55 and 61, the applicant describes the method according to claims 54 and 60, 
which are met by Mandelbaum (see above), with the following limitation which is also met by 
Mandelbaum: 

Further comprising obtaining details of the intended recipient including the independently 
verifiable data record prior to transmitting the document (Col 5, lines 5-27). 

As per claims 56 and 62, the applicant describes the method according to claims 55 and 61, 
which is met by Mandelbaum (see above), with the following limitation which is also met by Mandelbaum: 

Wherein the step of obtaining details comprises obtaining the independently verifiable data record 
from a central database storing many possible intended recipients' details (Col 5, lines 9-11). 
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As per claim 58, the applicant describes the method of claim 54, which is met by Mandelbaum 
(see above), with the following limitation which is also met by Mandelbaum: 

Further comprising encoding the document prior to transmitting it to the second station and 
decoding the received document once the intended recipient has proven their identity (Col 5, lines 33-40; 
5 Col 7, lines 27-44); 

The use of encoding or encrypting the document is described (Col 5, lines 33-40) as is the use of 
decoding or decrypting the document (Col 7, lines 27-44). 

As per claim 60, the applicant describes a method of delivering a digital document from a first 
10 station via a communications network to an intended recipient at a second station comprising limitations 
b) through f) which are met by Mandelbaum in claim 54 (see above) and the following additional limitation 
which is also met by Mandelbaum: 

a) obtaining details of the intended recipient, including an independently verifiable data record of 
the intended recipient at the first station, encoding the document using encryption techniques prior to 
15 transmitting it to the second station (Col 5, lines 5-10; Col 5, lines 33-40). 



Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

20 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

forth in section 102 of this title, if the differences between the subject matter sought to.be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



Claims 3-4,44-45, and 49-53 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Mandelbaum in view of Lundblad, European Patent Application Publication No. 0542703 A1. 
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As per claims 3-4 and 44-45, the applicant describes the method of claims 1 and 41, which are 
met by Mandelbaum (see above), with the following additional limitation which is met by Lundblad: 

Wherein the retaining step comprises printing out the document as received and placing it in a 
locked compartment (Col 3, lines 3-12; 14 of Fig. 1); 

Mandelbaum discloses all the limitations of the independent claims 1 and 41 However 
Mandelbaum fails to disclose the use of a locked compartment for storing the documents. 

Lundblad discloses a fax transmission apparatus which includes the use of a locked compartment 
where documents can be stored until opened by the intended recipient who proves his identity by using a 
physical key to unlock the compartment. It would have been obvious to one of ordinary skill in the art at 
the time the invention was filed to incorporate the ideas of Lundblad with those of Mandelbaum because 
the incorporation of the two systems provides another way to securely retain documents until an 
authorized person has access to receive them. 

Regarding claims 4 and 45, only an authorized person who has the proper key can release the 
documents from the locked compartment. 

As per claim 49, the applicant describes a device for delivering a digital document to an intended 
recipient, the device comprising limitations a) through d) which are met by Mandelbaum (see the rejection 
for claim 1) with limitation e) which is met by Lundblad (see the rejection for claim 3). 

As per claims 50-53, the applicant repeats claims that have already been rejected by 
Mandelbaum but are now rejected under U.S.C. 103(a) in light of Mandelbaum in view of Lundblad 
because they depend on independent claim 49 which is rejected by Mandelbaum in view of Lundblad. 
The applicant should note that claim 50 corresponds to claim 4, claim 51 corresponds to claim 2, claim 52 
corresponds to 17, and claim 53 corresponds to claim 9. 

Claims 12,57, and 63 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Mandelbaum in view of Schneier. 
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As per claims 12,57, and 63, the applicant describes the method of claim 11, which is met by 
Chan, with the following limitation which is met by Schneier: 

Wherein the intended recipient's independently verifiable data record is provided as an intended 
5 recipient's digital certificate (Schneier: pages 575-576); 

Mandelbaum discloses all the limitations of claim 1. Mandelbaum does not disclose certificate 
being sent as an independently verifiable data record. 

Schneier discloses that a certificate can be transmitted between users to verify, it would have 
been obvious to one of ordinary skill in the art at the time the invention was filed to combine the ideas of 
10 Schneir with those of Mandelbaum and have a certificate sent as an additional independently verifiable 
data record so that further verification can be provided and/or a public key of a user can be extracted. 

Claims 19-37, and 59 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Mandelbaum in view of Auerbach, European Patent Application Publication No. 0798892 A2. * 

15 

As per claims 19 and 59, the applicant describes the method of claims 18 and 58, which are 
anticipated by Mandelbaum (see above), with the following limitation which is anticipated by Auerbach: 

Wherein the transmitted document has been encoded using enveloping technique and the 
decoding step comprises using enveloping decryption techniques (Col 3, lines 5-10; Col 3, lines 26-30); 
20 Mandelbaum describes all the limitations of claim 18. However, Mandelbaum fails to disclose the 

use of enveloping encryption and decryption techniques. 

Auerbach discloses a method for the creation and distribution of digital documents using the 
methods and techniques of secure cryptographic envelopes (Col 1, lines 3-8). Cryptographic envelopes 
provide an extra layer of security for messages because they comprise superencrypting a message. It 
25 would have been obvious to one of ordinary skill in the art at the time the invention was filed to 

incorporate the ideas of Auerbach with those of Mandelbaum so that the transmitted message is encoded 
using enveloping technique for extra security. 
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As per claim 20, the applicant describes the method of claim 19, which is anticipated by 
Mandelbaum in view of Auerbach (see above), with the following limitations which are anticipated by 
Auerbach: 

5 a) the transmitted document has been encoded with a session key and the session key has been 

encrypted with the first token (Col 2, lines 56-58; Col 3, lines 1-10); 

b) the transmitting step comprises transmitting the encrypted session key to the printout station 
(Col 2, lines 56-58; Col 3, lines 1-10); 

c) the decoding step comprises decrypting the encrypted session key with the second token and 
10 decoding the received document with the decrypted session key (Col 3, lines 26-30); 

Regarding part a), the transmitted document is encoded with a session key which corresponds to 
the part encryption key disclosed by Auerbach. Auerbach further discloses that the part encryption key, 
or session key, is encrypted using a first public key, which would correspond to the intended recipient's 
public key if the ideas of Auerbach were combined with the ideas of Mandelbaum. 
15 It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 

incorporate the ideas of Auerbach with those of Mandelbaum in light of the fact that superencryption via a 
session key and a public key provides an additional layer of security. 

As per claim 21, the applicant describes a method of delivering a digital document to an intended 
20 recipient at a printout station comprising limitations a) and c) through e) which are met by Mandelbaum 
(see rejection for claim 1) and limitations b) and e) which are met by Auerbach (see rejection for claim 
20). 

As per claims 22 and 25-37, the applicant repeats claims 2 and 5-17 which have already been 
25 rejected by Mandelbaum (see above). Claims 22 and 25-37 are rejected under U.S.C. 103(a) because 
they are dependent on the system of claim 21 which is met by Mandelbaum in view of Auerbach (see 
above). 
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Claims 23 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum 
in view of Auerbach in further view of Lundblad. 

5 Claims 23 and 24 are repeats of claims 3 and 4 which are rejected by Mandelbaum in view of 

Lundblad (see above). Claims 23 and 24 must be rejected under Mandelbaum in view of Auerbach in 
further view of Lundblad because the claims depend on claim 21 which is met by Mandelbaum in view of 
Auerbach. 

10 Claims 38 and 39 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum 

in view of Auerbach in further view of Schneier. 

As per claim 38, the applicant describes the method of claim 21, which is anticipated by 
Mandelbaum in view of Auerbach (see above), with the additional limitation that the system involves a 
1 5 plurality of users and not just one user which is met by Schneier (pages 68-73). 

Mandelbaum in view of Auerbach describe all the limitations of claim 21. However Mandelbaum 
in view of Auerbach fails to disclose the use of a plurality of users. Schneier discloses a secret splitting 
method whereby more than one intended recipient is needed to be present to allow a process to happen 
(page 70-71). 

20 It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 

combine the ideas of Schneier with those of Mandelbaum in view of Auerbach in the case where more 
than one recipient needs to prove his identity at the printing station for a document to be printed. 



25 



As per claim 39, the applicant describes the method of claim 38, which is anticipated by 
Mandelbaum in view of Auerbach in further view of Schneier, with the following additional limitation which 
is also met by Schneier: 
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Wherein the transmitted document or a session encryption/decryption key of the transmitted 
document has been sequentially encrypted with each of the first tokens of the intended recipients in a 
given order and the processing step comprises sequentially decrypting the transmitted document or a 
session encryption/decryption key with each of the second tokens of the intended recipients in the 
5 reverse of the given sequential order (page 68-69). 

Mandelbaum in view of Auerbach in further view of Schneier describe all the limitations of claim 
38. Schneier also discloses the use of multiple key cryptography where a message can be encrypted 
with more than one public key so that the intended recipients need to present their private keys in a 
particular order to decrypt a message. 
10 It would have been obvious to one of ordinary skill in the art at the time the invention was filed to 

combine the ideas of Schneier with those of Mandelbaum in view of Auerbach in the case where more 
than one recipient needs to prove his identity at the printing station for a document to be printed. 

Claims 40 are rejected under 35 U.S.C. 103(a) as being unpatentable over Mandelbaum in view 
15 of Schneier. 

As per claim 40, the applicant describes a method of delivering a digital document which is met 
by Mandelbaum (see the rejection for claim 1) with the additional limitation of incorporating the use of a 
plurality of intended recipients which is met by Schneier (see the rejection for claim 38). 

20 

Response to Arguments 

Applicant's arguments, see Remarks filed 5/1.3/05, with respect to claims 1,41,49, and 54 have 
been fully considered but they are not persuasive. The applicant argues that Mandelbaum does not 
teach limitations a and b. The applicant further argues that Mandelbaum is limited to at most a system 
25 wherein the header portion of a message is sent unrestricted while the body of a message may be sent 
either unrestricted or restricted and since Mandelbaum' message is two portions of a single message, 
Mandelbaum does not anticipate claim 1. This argument has no relevance to the claimed invention. 
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There is nothing in the claim language that suggests that an independently verifiable data record and a 
transmitted document cannot be sent together as two portions of a single message. 

Mandelbaum discloses the idea of sending a document in encrypted form with a special header 
which identifies the recipient. The message is received by the printout station and securely retained in 
memory (part a) until a recipient can verify his authenticity. The special header further acts as an 
independently verifiable data record as it may contain a special password for proof of the intended 
recipient's identity (Col 5, lines 49-54). The user must enter the appropriate special password before he 
is allowed access to the message. 

Applicant's arguments with respect to claim 4 have been fully considered but they are not 
persuasive. The applicant argues that the Lundblad rejection should be withdrawn because a physical 
key is not a controller. The examiner disagrees. The applicant describes a system in which a smart card 
is presented in order to allow a locked compartment to be released. The examiner fails to see how a 
physical smart card is a controller and a physical key is not. Both are used to control an operation which 
is in this case opening a locked compartment. 

Applicant's arguments with respect to claim 49 have been fully considered but they are not 
persuasive. The applicant argues that a physical key does not prove the user's identity. The applicant 
describes a system in which a physical smart card is presented in order to allow a locked compartment to 
be released. The examiner fails to see how presenting a physical smart card proves a user's identity but 
presenting a physical key does not. Both a physical key and a physical smart card are means to 
authenticate a user. Admittedly, a physical key can be stolen and an unauthorized person could use it to 
open the locked compartment. But a smart card can be stolen as well and an unauthorized person could 
use it to open a locked compartment. 

Applicant's arguments with respect to claim 7 have been fully considered and they are 
persuasive. The examiner agrees with the applicant's reasoning as to the deficiency in the single 
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reference 103 rejection. However, new grounds of rejection have been made upon further examination of 
the reference. 

Applicant's arguments with respect to claims 12,57, and 63 have been fully considered and they 
are persuasive. The examiner agrees with the applicant's reasoning as to the deficiency in the single 
reference 103 rejection. However, new grounds of rejection have been made upon further examination of 
the reference. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set forth 
in 37CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE MONTHS from 
the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date 
of this final action and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date the advisory action 
is mailed, and any extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Kevin Schubert whose telephone number is (571) 272-4239. The examiner can normally 
be reached on M-F 8:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Andrew Caldwell can be reached on (571) 272-3868. The fax phone number for the organization where 
this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
5 you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). 




10 



ANDREW CALDWELL 
SUPERVISORY PATENT EXAMINER 
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